Privacy Policy

Last Revised: January 2025 | Applicable to Global Enterprise Clients, B2B Distributors & Retail Partners

1. Corporate Responsibility & Legal Framework

Urbanista AB (Reg. No. 556797-3267, Mäster Samuelsgatan 10, 111 44 Stockholm, Sweden) acts as the primary data controller for business operations, digital interfaces, and commercial interactions globally. We ensure all personal and technical data collected across our international supply network, mobile applications, and procurement systems strictly adhere to European Data Protection Regulations (GDPR Regulation EU 2016/679) and applicable international privacy statutes.

2. Categories of Data Collected in B2B & Wholesale Operations

To streamline global commercial inquiries, product distribution, firmware administration, and warranty claims, Urbanista processes specific categories of professional and corporate data:

A. Commercial Procurement & Inquiries

• Professional Identifiers: Name, corporate email address, business telephone number, enterprise title, and company location.
• Transaction Records: Purchase histories, product order specifications, customized acoustic requests, delivery logistics records, and warranty registrations.
• Financial Billing Data: Commercial credit assessments, wire transfer documentation, and invoicing parameters managed through encrypted payment processors.

B. Application & Hardware Telemetry

• Device Performance Parameters: Product serial numbers, battery health cycles, solar cell lux-input metrics, and active noise-cancelling (ANC) configuration preferences via the Urbanista Audio App.
• Technical Identifiers: IP addresses, anonymized usage telemetry, mobile system OS versions, and regional usage diagnostics for continuous hardware optimization.

3. Legal Grounds & Business Operational Purposes

Urbanista processes commercial data strictly under recognized legal baselines to deliver seamless enterprise operations:

• Performance of Commercial Contracts: Fulfilling distribution agreements, manufacturing orders, logistics handling, and international B2B shipments.
• Regulatory & Accounting Compliance: Retaining mandatory statutory financial records for seven years in compliance with Swedish Bookkeeping Statutes and international trade laws.
• Legitimate Commercial Interests: Safeguard enterprise infrastructure, evaluate product acoustics under real-world usage, and refine commercial catalog offerings for corporate buyers.

4. Institutional Data Confidentiality & Global Transfer Controls

Urbanista maintains a non-disclosure posture regarding business relationships. Commercial procurement data is never sold, leased, or commercialized to external third parties.

Secure Cross-Border Data Transfers

To support global supply chains, product fulfillments, and localized customer operations across North America, Europe, Asia-Pacific, and the Middle East, data may be accessed by authorized logistics centers and cloud platforms. All non-EU data operations are secured through European Commission Standard Contractual Clauses (SCCs), ensuring equivalent data protection guarantees regardless of geographic destination.

5. Enterprise Data Rights & Compliance Actions

Corporate partners, authorized procurement representatives, and individual clients hold full authority over their personal and commercial data entries under GDPR and international privacy framework rules:

• Right to Access & Data Portability: Request full accounting copies of registered commercial records and acoustic performance histories.
• Right to Rectification & Erasure: Modify inaccurate enterprise contacts or request immediate purge of non-statutory commercial archives.
• Right to Object & Revoke Consent: Opt-out of institutional technical surveys, commercial newsletters, or product data telemetry at any time.

6. Enterprise Security Protocols & Infrastructure Safeguards

Urbanista employs advanced technical and organizational measures (TOMs), including AES 256-bit encryption for stored credentials, TLS 1.3 encryption protocols for active network transmissions, strict role-based access control (RBAC), and continuous monitoring against unauthorized access to maintain total client confidentiality.